SPECIFICATION 



TO ALL WHOM IT MAY CONCERN: 



BE IT KNOWN THAT I, YOHEI YAMAMOTO , a citizen 
of Japan residing at Tokyo, Japan have invented certain 
new and useful improvements in 

DOCUMENT MANAGEMENT DEVICE AND METHOD, PROGRAM 
THEREFOR, AND STORAGE MEDIUM 



of which the following is a specification:- 
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BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The present invention relates to a document 
management device, a document management method, a 
5 program for document management, and a storage medium. 

2 . Description of the Related Art 

In. a server having folders for storing 
documents, in general, it is set that each user is 
allowed to use specific folders. For example, the 

10 server may permit a user A to store documents 

(authority of storage) and to rewrite/delete documents 
in a folder C of the server (authority of 
rewrite/deletion) , and the server may also grant 
another user B only an authority of storage in the 

15 folder C of the server, that is, permits the user B to 
store documents in the folder C. 

For example, the user A sends its username 
and password from a device X to the server through a 
network, and when connection between the device X with 

20 the server is allowed, the user A sends documents held 
in the device X to the server, and stores the documents 
in the folder C of the server, or rewrites or deletes 
the documents in the folder C. For example, Japanese 
Patent Application No. 3218017 discloses a technique in 

25 this field. 
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In the related art, however, if documents 
are not held in the device X but in a device Y, which 
is connected with the device X through the network, the 
user A is not allowed to store documents in folders of 
5 the server directly from the device Y from the point of 
view of security of the system, although the operation 
of the user A from the device X is allowed. In order to 
store documents held in the device Y in the server, the 
documents have to be first transferred to the device X 
10 from the device Y through the network, and then the 
user A can store the transferred documents to the 
server from the device X. As result, additional loads 
are imposed on the network. 

15 SUMMARY OF THE INVENTION 

Accordingly, it is a general object of the 
present invention to solve the above problems of the 
related art. 

A more specific object of the present 
2 0 invention is to provide a device and a method for 

document management enabling usage of a usage-permitted 
folder while ensuring high security without imposing an 
additional load on a network. 

According to a first aspect of the present 
25 invention, there is provided a document management 
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device having a document storage unit for storing a 
document. The document management device includes a 
usage permission information request reception unit 
configured to receive a request from a client for 
5 acquiring usage permission information that permits 

usage of the document storage unit, a usage permission 
information generation unit configured to generate the 
usage permission information in response to the 
received request, and a usage permission information 

10 transmission unit configured to transmit the usage 
permission information to the client. 

According to the present invention, because 
the document management device includes a usage 
permission information request reception unit for 

15 receiving a request for acquiring usage permission 

information that permits usage of the document storage 
unit, a usage permission information generation unit 
for generating the usage permission information in 
response to the received request, and a usage 

20 permission information transmission unit for 

transmitting the usage permission information to the 
client, it is possible to use a usage-permitted folder 
while ensuring high security without imposing an 
additional load on a network. 

25 As an embodiment, the usage permission 
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information generation unit generates the usage 
permission information and identification information 
of the usage permission information, and holds the 
usage permission information. 
5 According to the present invention, because 

the usage permission information generation unit 
generates the usage permission information and 
identification information thereof and holds the usage 
permission information, it is possible to manage the 

10 usage permission information. 

As an embodiment, the usage permission 
information transmission unit transmits the 
identification information to the client as the usage 
permission information . 

15 In response to the present invention, 

because the usage permission information transmission 
unit transmits the identification information to the 
client as the usage permission information, the 
identification information is provided to the client as 

20 the usage permission information. 

As an embodiment, the usage permission 
information includes identification information of the 
document storage unit and authority information of the 
usage permission information. 

25 According to the present invention, because 
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the usage permission information includes 

identification information of the document storage unit 
and authority information of the usage permission 
information, it is possible to provide the usage 
5 permission information of different authorities. 

As an embodiment, the usage permission 
information includes identification information of the 
document storage unit and effective period information 
of the usage permission information. 
10 According to the present invention, because 

the usage permission information includes 

identification information of the document storage unit 
and effective period information of the usage 
permission information, it is possible to set an 

15 effective period in the usage permission information. 

As an embodiment, the usage permission 
information includes identification information of the 
document storage unit and information of a maximum 
number of connections with the document management 

2 0 device. 

According to the present invention, because 
the usage permission information includes 
identification information of the document storage unit 
and information of a maximum number of connections with 
25 the document management device, it is possible to set a 
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maximum number of connections with the document 
management device in the usage permission information. 

As an embodiment, the usage permission 
information includes identification information of the 
5 document storage unit and information of a maximum 
number of operations of document storage in the 
document storage unit. 

According to the present invention, because 
the usage permission information includes 

10 identification information of the document storage unit 
and information of a maximum number of operations of 
document storage in the document storage unit, it is 
possible to set the maximum number of document storage 
operations in the document storage unit in the usage 

15 permission information. 

As an embodiment, the usage permission 
information includes identification information of the 
document storage unit and information of a capacity of 
effective document storage in the document storage unit. 

20 According to the present invention, because 

the usage permission information includes 

identification information of the document storage unit 
and information of a capacity of effective document 
storage in the document storage unit, it is possible to 
25 set the effective document storage capacity in the 
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usage permission information. 

As an embodiment , the usage permission 
information includes identification information of a 
plurality of the document storage units. 
5 According to the present invention, because 

the usage permission information includes 
identification information of a plurality of the 
document storage units, it is possible to permit usage 
of more than one document storage units. 
10 As an embodiment, the document management 

device further has a usage request reception unit 
I configured to receive a request from a client for using 

the document storage unit, and a usage unit configured 
to use the document storage unit according to the usage 
15 permission information. 

According to the present invention, because 
the document management device further has a usage 
request reception unit to receive a request for using 
the document storage unit and a usage unit to use the 
20 document storage unit, it is possible to allow the 

client requesting the usage permission information to 
use the document storage unit. 

As an embodiment, the client requesting 

I usage of the document storage unit is different from 

I 

25 the client that receives the usage permission 

i 
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information transmitted from the usage permission 
information transmission unit. 

According to the present invention, because 
the client requesting usage of the document storage 
5 unit is different from the client that receives the 

usage permission information transmitted from the usage 
permission information transmission unit, it is 
possible to receive and process requests from clients 
other than the client that is permitted to use the 
10 usage-permitted folder . 

As an embodiment, the usage request includes 
information on the document and information on the 
document storage unit. 

According to the present invention, because 
15 the usage request includes information on the document 
and information on the document storage unit, it is 
possible to store a specified document in the document 
storage unit permitted for use, or to rewrite or delete 
the documents held in the document storage unit 
20 permitted for use. 

As an embodiment, the usage unit stores the 
document in the document storage unit according to the 
usage permission information. 

According to the present invention, because 
2 5 the usage unit stores the document in the document 
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storage unit according to the usage permission 
information, it is possible to store a specified 
document in the document storage unit permitted for use. 
As an embodiment , the document management 
5 device further has a document identification 

information appending unit configured to append 
document identification information for identifying the 
stored document to the usage permission information. 
The information is appended as an editable data. 

10 According to the present invention, because 

the document management device has a document 
identification information appending unit to append 
document identification information to the usage 
permission information, and the information is appended 

15 as an editable data, the client that stores the 

specified document in the document storage unit is able 
to modify the stored document. 

As an embodiment, the document management 
device further has a document identification 

20 information transmission unit configured to transmit 

the document identification information for identifying 
the stored document to the client that requests usage 
of the document storage unit. 

According to the present invention, because 

2 5 the document management device further has a document 
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identification information transmission unit to 
transmit the document identification information, the 
client that stores the specified document in the 
document storage unit is able to identify the stored 
5 document. 

As an embodiment, the document management 
device further has a document usage permission 
information transmission unit configured to transmit 
information for permitting usage of the stored document 
10 to the client that requests usage of the document 
storage unit. 

According to the present invention, because 
the document management device has a document usage 
permission information transmission unit to transmit 
15 information for permitting usage of the stored document, 
the client that stores the specified document in the 
document storage unit is able to utilize the stored 
document . 

As an embodiment, the usage unit includes a 
2 0 determination unit that determines whether the document 
storage unit requested by the usage request is at a 
lower level than the document storage unit permitted 
for use by the usage permission information generated 
by the usage permission information generation unit. 
25 According to the present invention, because 
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the usage unit includes a determination unit to 
determine if the document storage unit requested by the 
usage request is at a lower level than the document 
storage unit permitted for use by the usage permission 
5 information, it is possible to permit use of the 

document storage unit even if the document storage unit 
specified by the client is at a lower level than the 
document storage unit permitted for use. 

As an embodiment, the document management 

10 device further has a document list information request 
reception unit configured to receive a request from a 
client for acquiring document list information of 
documents stored in the document storage unit, and a 
document list information transmission unit configured 

15 to transmit the document list information to the client. 

According to the present invention, because 
the document management device has a document list 
information request reception unit to receive a request 
from a client for acquiring document list information 

2 0 of the stored documents and a document list information 
transmission unit to transmit the document list 
information to the client, it is possible to provide a 
document list to the client when necessary. 

As an embodiment, the document management 

25 device further has a document content information 



- 13 - 



request reception unit configured to receive a request 
from a client for acquiring information of contents of 
the document stored in the document storage unit, and a 
document content information transmission unit 
5 configured to transmit the document content information 
to the client in response to the received request. 

According to the present invention, because 
the document management device has a document content 
information request reception unit to receive a request 

10 from a client for acquiring document content 

information and a document content information 
transmission unit to transmit the document content 
information to the client in response to the received 
request, it is possible to provide contents of the 

15 document to the client when necessary. 

As an embodiment, the document management 
device further has a connection permission request 
reception unit configured to receive a request from a 
client for acquiring connection permission information 

20 that includes the usage permission information and 

permits connection with the document management device, 
a connection permission information generation unit 
configured to generate the connection permission 
information in response to the received request, and a 

25 connection permission information transmission unit 
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configured to transmit the connection permission 
information to the client. 

According to the present invention, because 
the document management device has a connection 
5 permission request reception unit to receive a request 
from a client for acquiring connection permission 
information that includes the usage permission 
information and permits connection with the document 
management device, a connection permission information 

10 generation unit to generate the connection permission 
information in response to the received request, and a 
connection permission information transmission unit to 
transmit the connection permission information to the 
client, it is possible to supply the connection 

15 permission information including the usage permission 
information to the client that makes the request to 
acquire the information. 

As an embodiment, the document management 
device further comprises an identification information 

20 request reception unit to receive a request from a 

client for acquiring identification information of the 
document storage unit, and an identification 
information transmission unit to transmit the 
identification information to the client that requests 

25 the information. The identification information of the 
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document storage unit includes the connection 
permission information and the usage permission 
information. 

According to the present invention, because 
5 the document management device further has an 

identification information request reception unit to 
receive a request from a client for acquiring 
identification information of the document storage unit, 
and an identification information transmission unit to 

10 transmit the identification information to the client 
requesting the information, it is possible to supply 
the identification information of the document storage 
unit including the connection permission information 
and the usage permission information to the client 

15 requesting to acquire the information. 

According to a second aspect of the present 
invention, there is provided a method of a document 
management device having a document storage unit for 
storing a document, the method includes the steps of 

20 receiving a request from a client for acquiring usage 
permission information that permits usage of the 
document storage unit, generating the usage permission 
information in response to the received request, and 
transmitting the usage permission information to the 

25 client. 
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According to the present invention, because 
the document management method includes the steps of 
receiving a request from a client for acquiring usage 
permission information that permits usage of the 
5 document storage unit, generating the usage permission 
information in response to the received request, and 
transmitting the usage permission information to the 
client, it is possible to use a usage-permitted folder 
while ensuring high security without imposing an 

10 additional load on a network. 

As an embodiment, the document management 
method further includes the steps of receiving a 
request from a client for using the document storage 
unit, and using the document storage unit according to 

15 the usage permission information. 

According to the present invention, because 
the document management method further . includes the 
steps of receiving a request for using the document 
storage unit, and using the document storage unit 

20 according to the usage permission information, it is 
possible to allow the client that made the request to 
use the document storage unit. 

As an embodiment, the client that requests 
usage of the document storage unit is different from 

25 the client that receives the usage permission 
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information transmitted in the step of transmitting the 
usage permission information. 

According to the present invention, because 
the client requesting usage of the document storage 
5 unit is different from the client that receives the 

usage permission information transmitted in the step of 
transmitting the usage permission information , it is 
possible to receive and process requests from other 
clients than the client that is permitted to use the 

10 usage-permitted folder. 

According to a third aspect of the present 
invention, there is provided a program executable by a 
computer for operating a document management device 
having a document storage unit for storing a document, 

15 including the steps of receiving a request from a 

client for acquiring usage permission information that 
permits usage of the document storage unit, generating 
the usage permission information in response to the 
received request, and transmitting the usage permission 

20 information to the client. 

According to a fourth aspect of the present 
invention, there is provided a storage medium storing a 
program executable by computer for operating a document 
management device having a document storage unit for 

25 storing a document, including the steps of receiving a 
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request from a client for acquiring usage permission 
information that permits usage of the document storage 
unit, generating the usage permission information in 
response to the received request, and transmitting the 
5 usage permission information to the client. 

These and other objects, features, and 
advantages of the present invention will become more 
apparent from the following detailed description of 
10 preferred embodiments given with reference to the 
accompanying drawings . 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a schematic view of a hardware 
15 configuration of a document management server 10 
according to the present invention; 

FIG. 2 is a diagram showing a document 
storage operation in the document management server 10 
as an example of a document management method of the 
2 0 present invention and an operation of the document 
management server 10; 

FIG. 3 is a block view showing an example of 
a functional configuration of the document management 
server 10; 

25 FIG. 4 is a table showing an example of a 
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folder ticket; 

FIG. 5 is a table showing an example of a 
folder- ticket-associated session ticket ; 

FIG. 6 is a program showing an example of a 
5 session ticket acquisition request; 

FIG. 7 is a program showing an example of a 
session ticket acquisition response; 

FIG. 8 is a program showing an example of a 
folder ticket acquisition request; 
10 FIG. 9 is a program showing an example of a 

folder ticket acquisition response; 

FIG. 10 is a program showing an example of a 
document storage information request; 

FIG. 11 is a program showing an example of a 
15 document storage information response; 

FIG. 12 is a program showing an example of a 
folder-ticket-associated session ticket acquisition 
request ; 

FIG. 13 is a program showing an example of a 
20 folder-ticket-associated session ticket acquisition 
response ; 

FIG. 14 is a program showing an example of a 
folder-ticket-associated folder ID acquisition request; 

FIG. 15 is a program showing an example of a 
25 folder-ticket-associated folder ID acquisition 
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response ; 

FIG. 16 is a program showing an example of a 
document storage request; 

FIG. 17 is a program showing an example of a 
5 document storage response; 

FIG. 18 is a program showing an example of a 
document list acquisition request; 

FIG. 19 is a program showing an example of a 
document list acquisition response; 
10 FIG. 20 is a program showing an example of a 

document content acquisition request; 

FIG. 21 is a program showing an example of a 
document content acquisition response; 

FIG. 22 is a flowchart showing an example of 
15 an operation of document storage in the document 
management server 10; 

FIG. 23 is a program showing a second 
example of the folder ticket acquisition request; 

FIG. 24 is a table showing a second example 
20 of the folder ticket; 

FIG. 25 is a flowchart showing an example of 
an operation of time limit confirmation by a folder 
ticket at the starting time of a session; 

FIG. 2 6 is a program showing a third example 
25 of the folder ticket acquisition request; 
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FIG. 27 is a table showing a third example 
of the folder ticket; 

FIG. 2 8 is a flowchart showing an example of 
an operation of confirmation of the limit number of 
5 connections at the beginning of the folder-ticket- 
associated session ; 

FIG. 29 is a program showing a fourth 
example of the folder ticket acquisition request; 

FIG. 30 is a table showing a fourth example 
10 of the folder ticket; 

FIG. 31 is a table showing a second example 
of the folder-ticket-associated session ticket; 

FIG. 32 is a flowchart showing an example of 
the operation of confirmation of the document storage 
15 limit when storing a document in a folder in the 
document management server 10; 

FIG. 33 is a program showing a fifth example 
of the folder ticket acquisition request; 

FIG. 34 is a table showing a fifth example 
20 of the folder ticket; 

FIG. 35 is a table showing a third example 
of the folder-ticket-associated session ticket; 

FIG. 3 6 is a flowchart showing an example of 
the operation of confirmation of the storage capacity 
25 limit when storing a document in a folder in the 
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document management server 10; 

FIG. 37 is a program showing a sixth example 
of the folder ticket acquisition request; 

FIG. 38 is a table showing a sixth example 
5 of the folder ticket; 

FIG. 39 is a schematic view showing an 
example of a layer structure of a folder; 

FIG. 40 is a flowchart showing a second 
example of the operation of document storage in the 
10 document management server 10; 

FIG. 41 is a flowchart showing a third 
example of the operation of document storage in the 
document management server 10; 

FIG. 42 is a program showing another example 
15 of the document storage response; 

FIG. 43 is a flowchart showing a fourth 
example of the operation of document storage in the 
document management server 10; and 

FIG. 44 is a table showing another example 
20 of the folder ticket. 



DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Below, preferred embodiments of the present 
invention are explained with reference to the 
2 5 accompanying drawings. 
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FIG. 1 is a schematic view of a hardware 
configuration of a document management server 10 
according to the present invention. Note that FIG. 1 
shows only elements necessary to explanations, and 
5 other elements irrelevant to explanations are omitted. 
It is the same for other figures below. 

As shown in FIG. 1, the document management 
server 10 includes a driver 21, a ROM (Read Only 
Memory) 22, a RAM (Random Access Memory) 23, a CPU 
10 (Central Processing Unit) 24, an interface 25, a hard 
disk (HD) 26, and a recording medium 27. The elements 
21, 22, 23, 24, 25, and 26 are connected with each 
other through a bus B. 

The interface 2 5 connects the document 
15 management server 10 with a not-illustrated network. 

Programs executed in the document management 
server 10 may be provided from the recording medium 27, 
or may be downloaded through the network. 

The recording medium 27 is installed in the 
20 driver 21; data or programs of the document management 
server 10 are installed in the ROM 22 through the 
driver 21 and the bus B. For example, the recording 
medium 2 7 may be a CD-ROM. 

ROM 22 stores data or programs of the 
25 document management server 10. RAM 23 reads out the 
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programs from the ROM 22 when the document management 
server 10 is booted and stores the programs. CPU 24 
executes processing according to the programs stored in 
RAM 23. 

5 HD 2 6 stores data, file and documents 

described below. 

Below, operation of document storage in the 
document management server 10 is described to 
illustrate an example of the document management method 
10 of the present invention and the operations of the 
document management server 10. 

FIG. 2 is a diagram showing the document 
storage operation in the document management server 10 
as an example of the document management method of the 
' 15 present invention and the operation of the document 

management server 10. 

In step S10, client A, being connected with 
the document management server 10 through the network, 
sends a session ticket acquisition request to the 
20 document management server 10 to obtain a session 

ticket, which permits connection of the client A with 
the document management server 10. An example of the 
session ticket acquisition request is illustrated below 
with reference to FIG. 6. 
25 Next, in step Sll, the document management 
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server 10 creates contents of the session ticket arid a 
session ticket ID ( IDentif ication) in response to the 
session ticket acquisition request, and sends a session 
ticket acquisition response to the client A. The 
5 session ticket acquisition response includes the 
session ticket ID which is used to represent the 
session ticket. An example of the session ticket 
acquisition response is illustrated below with 
reference to FIG. 7. 

10 Next, in step S12 , the client A sends a 

folder ticket acquisition request to the document 
management server 10 to obtain a folder ticket, which 
is usage permission information for using folders of 
the document management server 10. The folder ticket 

15 acquisition request includes the session ticket 

obtained in step Sll. An example of the folder ticket 
acquisition request is illustrated below with reference 
to FIG. 8. 

Next, in step S13, the document management 
20 server 10 creates contents of the folder ticket and a 
folder ticket ID in response to the folder ticket 
acquisition request, and sends a folder ticket 
acquisition response to the client A. The folder ticket 
acquisition response includes the folder ticket ID 
25 which is used to represent the folder ticket. The 
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document management server 10 also holds the created 
folder ticket. An example of the folder ticket 
acquisition response is illustrated below with 
reference to FIG. 9, and an example of the folder 
5 ticket is illustrated below with reference to FIG. 4. 

Next, in step S14, the client A sends a 
document storage information request to a client B. The 
document storage information request includes the 
folder ticket; and it indicates a folder of the 

10 document management server 10 and a document to be 
stored in the folder. An example of the document 
storage information request is illustrated below with 
reference to FIG. 10. 

Next, in step S15, the client B sends a 

15 document storage information response to the client A 

in response to the document storage information request 
obtained in step SI 4. An example of the document 
storage information response is illustrated below with 
reference to FIG. 11. 

20 Next, in step S16, the client B sends a 

session ticket acquisition request to the document 
management server 10 to obtain a session ticket, which 
permits connection of the client B with the document 
management server 10. The session ticket acquisition 

25 request includes the folder ticket, and this session 



- 27 - 



20 



25 



ticket requested by the client B is therefore 
associated with the folder ticket obtained from the 
client A in the step S13. Below, this session ticket is 
referred to as a "folder-ticket-associated session 
5 ticket", and the session ticket acquisition request 

made by the client B in the present step is referred to 
as a "folder-ticket-associated session ticket 
acquisition request". An example of the folder-ticket- 
associated session ticket acquisition request is 
10 illustrated below with reference to FIG. 12. 

Next, in step S17, the document management 
server 10 creates contents of the folder-ticket- 
associated session ticket and a folder-ticket- 
associated session ticket ID in response to the folder- 
ticket-associated session ticket acquisition request, 
and sends a folder-ticket-associated session ticket 
acquisition response to the client B. The folder- 
ticket-associated session ticket acquisition response 
includes the folder-ticket-associated session ticket ID 
to represent the folder-ticket-associated session 
ticket. The document management server 10 holds the 
created folder-ticket-associated session ticket. An 
example of the folder-ticket-associated session ticket 
acquisition response is illustrated below with 
reference to FIG. 13, and an example of the folder- 



15 
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ticket-associated session ticket is illustrated below 
with reference to FIG. 5. 

Next, in step S18, the client B sends a 
folder ID acquisition request to the document 
5 management server 10 to obtain a folder ID, which is 
the ID of the folder permitted to be used by the 
document management server 10, and the folder ID 
acquisition request includes the folder ticket obtained 
in step S14 and the session ticket obtained in step S17 . 

10 Similarly, this folder ID requested by the client B is 
associated with the folder ticket obtained from the 
client A in the step S13. Below, this folder ID is 
referred to as a "f older-ticket-associated folder ID", 
and the folder ID acquisition request made by the 

15 client B in the present step is referred to as a 
"f older-ticket-associated folder ID acquisition 
request". An example of the folder-ticket-associated 
folder ID acquisition request is illustrated below with 
reference to FIG. 14. 

20 Next, in step S19, the document management 

server 10 sends a folder-ticket-associated folder ID 
acquisition response to the client B in response to the 
folder-ticket-associated folder ID acquisition request 
obtained in step S18. The folder-ticket-associated 

25 folder ID acquisition response includes the folder- 
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ticket-associated folder ID. An example of the folder- 
ticket-associated folder ID acquisition response is 
illustrated below with reference to FIG. 15. 

Next, in step S20 , the client B sends a 
5 document storage request to the document management 
server 10. The document storage request includes the 
folder-ticket-associated session ticket obtained in 
step S17, the folder-ticket-associated folder ID 
obtained in step S19 and contents of the documents to 

10 ■ be stored. An example of the document storage request 
is illustrated below with reference to FIG. 16. 

Next, in step S21, in response to the 
document storage request obtained in step S2 0, the 
document management server 10 sends a document storage 

15 response to the client B. The document storage response 
directs to store the specified document to the 
specified folder and includes a document ID for 
identifying the stored document. An example of the 
document storage response is illustrated below with 

20 reference to FIG. 17. 

Next, in step S22, the client A sends a 
document list acquisition request to the document 
management server 10 to obtain a document list of the 
documents stored in the folder of the document 

25 management server 10. An example of the document list 
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acquisition request is illustrated below with reference 
to FIG. 18 . 

Next, in step S23, the document management 
server 10 sends a document list acquisition response in 
5 response to the document list acquisition request 

obtained in step S22 to the client A. The document list 
acquisition response includes the document list. An 
example of the document list acquisition response is 
illustrated below with reference to FIG. 19. 

10 Next, in step S24, the client A sends a 

document content acquisition request to the document 
management server 10 to obtain the contents of the 
document stored in the folder of the document 
management server 10. An example of the document 

15 content acquisition request is illustrated below with 
reference to FIG. 20. 

Next, in step S2 5 , the document management 
server 10 sends a document content acquisition response 
in response to the document content acquisition request 

20 obtained in step S24 to the client A. The document 

content acquisition response includes the contents of 
the document. An example of the document content 
acquisition response is illustrated below with 
reference to FIG. 21. 

25 According to the method illustrated in FIG. 
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2, a user transfers a folder ticket from the client A 
to the client B, thereby, enabling direct storage of 
documents in the document management server 10 from the 
client B. 

5 Therefore, once the client A obtains a 

document from the client B, the client A then transmits 
the document to the document management server 10, 
Therefore, it is not necessary to store the document, 
and there is no additional load imposed on the network. 
10 Certainly, the client A may use the folder 

ticket to store the documents held by itself in the 
document management server 10. 

Next, an example of the functional 
configuration of the document management server 10 is 
15 explained with respect to FIG. 3. 

FIG. 3 is a block view showing an example of 
the functional configuration of the document management 
server 10 . 

As shown in FIG. 3, the document management 
20 server 10 includes a usage permission information 
request reception unit 101, a usage permission 
information generation unit 102, a usage permission 
information transmission unit 103, a usage request 
reception unit 104, a usage unit 105, a layer 
25 determination unit 106 in the usage unit 105, a 
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document identification information appending unit 107, 
a document identification information transmission unit 
108, a document usage permission information 
transmission unit 109, a document list information 
5 request reception unit 110, a document list information 
acquisition unit 111, a document list information 
transmission unit 112, a document content information 
request reception unit 113, a document content 
information acquisition unit 114, a document content 

10 information transmission unit 115, a connection 

permission request reception unit 116, a connection 
permission information generation unit 117, a 
connection permission information transmission unit 118, 
an identification information request reception unit 

15 119, an identification information acquisition unit. 120, 
and an identification information transmission unit 121. 

The usage permission information request 
reception unit 101 receives the folder ticket 
acquisition request from a client. 

20 The usage permission information generation 

unit 102 creates the folder ticket in response to the 
folder ticket acquisition request received in the usage 
permission information request reception unit 101. The 
usage permission information generation unit 102 may 

25 also hold and manage the created folder ticket. 
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The usage permission information 
transmission unit 103 sends the folder ticket ID for 
identifying the folder ticket created in the usage 
permission information generation unit 102 to the 
5 client. The usage permission information transmission 
unit 103 may first encrypt the folder ticket ID before 
sending it to the client. 

The usage request reception unit 104 is a 
receiver to receive a request of usage of a folder, for 
10 example, the usage request reception unit 104 receives 
the document storage request from the client. 

The usage unit 105 is for utilizing a folder 
in response to the request received in the usage 
request reception unit 104. For example, in response to 
15 the request, the usage unit 105 stores a specified 
document in the specified folder. 

The layer determination unit 106 determines 
whether the folder specified by the usage request 
received in the usage request reception unit 104 is at 
20 a lower level than the folder that is permitted for use 
by the folder ticket. 

The document identification information 
appending unit 107 appends, for example, a document ID 
for identifying the stored document to the folder 
25 ticket with the document ID being an editable text. 
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The document identification information 
transmission unit 108 transmits, for example, the 
document ID for identifying the stored document to the 
original client requesting to store the document. 
5 The document usage permission information 

transmission unit 109 transmits, for example, a 
document ticket for permitting usage of the stored 
document to the original client requesting to store the 
document . 

10 The document list information request 

reception unit 110 receives the document list 
acquisition request from the client desiring to obtain 
the document list information of the documents stored 
in the folder. 

15 The document list information acquisition 

unit 111, in response to the document list acquisition 
request, received in the document list information 
request reception unit 110, acquires a list of the 
documents stored in the corresponding folder. 

2 0 The document list information transmission 

unit 112 transmits the document list acquisition 
response including the document list obtained in the 
document list information acquisition unit 111 to the 
client . 

25 The document content information request 



reception unit 113 receives the document content 
acquisition request from the client desiring to obtain 
the contents of the document stored in the folder. 

The document content information acquisition 
unit 114 acquires the contents of the document stored 
in the corresponding folder in response to the document 
content acquisition request received in the document 
content information request reception unit 113. 

The document content information 
transmission unit 115 transmits the document content 
acquisition response including the contents of the 
document obtained in the document content information 
acquisition unit 114 to the client. 

The connection permission request reception 
unit 116 receives the folder-ticket-associated session 
ticket acquisition request from the client. 

The connection permission information 
generation unit 117 creates the folder-ticket- 
associated session ticket in response to the folder- 
ticket-associated session ticket acquisition request 
received in the connection permission request reception 
unit 116. 

The connection permission information 
transmission unit 118 sends to the client the folder- 
ticket-associated session ticket acquisition response 
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including a session ticket ID for identifying the 
folder-ticket-associated session ticket created in the 
connection permission information generation unit 117. 
The identification information request 
5 reception unit 119 receives the folder-ticket- 
associated folder ID acquisition request from the 
client . 

The identification information acquisition 
unit 120 acquires the folder ID in response to the 
10 folder-ticket-associated folder ID acquisition request 
received in the identification information request 
reception unit 119. 

The identification information transmission 
unit 121 transmits to the client the folder ID 
15 acquisition response including the folder ID obtained 

in the identification information acquisition unit 120. 

FIG. 4 is a table showing an example of the 
folder ticket. 

As shown in FIG. 4, in the folder ticket, 
20 there is a folder ID for identifying the folder that 

the folder ticket is permitted to use. Once the folder 
ticket acquisition request is received, the document 
management server 10 creates the folder ticket 
associated with the folder ticket acquisition request 
25 and holds the folder ticket. 
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The folder ticket may also include 
information on the authority of the folder ticket, In 
addition to the folder ID shown in FIG. 4. 

For example, the folder ticket shown in FIG. 
5 4 may include data indicating whether the folder ticket 
only has the authority of storing documents in the 
folder, or has all of the authorities of storing 
documents in the folder, rewriting the stored documents, 
and deleting the stored documents . 
10 By incorporating the authority information 

into the folder ticket, the document management server 
10 can provide folder tickets having different 
authorities for the client. 

FIG. 5 is a table showing an example of a 
15 folder-ticket-associated session ticket. 

As shown in FIG. 5, in the folder-ticket- 
associated session ticket, there are a session ticket 
ID and a folder ticket ID. Once the folder-ticket- 
associated session ticket acquisition request is 
2 0 received, the document management server 10 creates the 
folder-ticket-associated session ticket in response to 
the folder-ticket-associated session ticket acquisition 
request and holds the folder-ticket-associated session 
ticket . 

25 FIG. 6 is a program showing an example of 
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the session ticket acquisition request. 

As shown in FIG. 6, the session ticket 
acquisition request includes tags <useridx/userid>, 
<passwordx/password> , <timeLimitx/timeLimit> and 
5 others. A user ID is included in the tag 

<useridx/userid> , a password is in the tag 
<passwordx/password> , and the effective duration is in 
the tag <timeLimitx/timeLimit> in units of seconds. 

The client A transmits the session ticket 
10 acquisition request shown in FIG. 6 to the document 
management server 10. 

FIG. 7 is a program showing an example of 
the session ticket acquisition response. 

As shown in FIG. 7 , the tag 
15 <returnValue></returnValue> in the session ticket 
acquisition response holds the session ticket. 

As described above, the document management 
server 10 creates contents of the session ticket and 
the session ticket ID in response to the session ticket 
20 acquisition request, and sends the session ticket 

acquisition response, which includes the session ticket 
ID to represent the session ticket, to the client A. 

FIG. 8 is a program showing an example of 
the folder ticket acquisition request. 
25 As shown in FIG. 8, the tag 
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<sessionid></sessionid> in the folder ticket 
acquisition response includes the session ticket, and 
the tag <f olderId></folderId> in the folder ticket 
acquisition response includes the folder ID of the 
5 document management server 10. 

The client A sends the folder ticket 
acquisition request to the document management server 
10, which includes the session ticket obtained in the 
session ticket acquisition response shown in FIG. 7 and 
10 the folder id desired to be permitted. 

FIG. 9 is a program showing an example of 
the folder ticket acquisition response. 

As shown in FIG. 9, the tag 
<returnvaluex/returnvalue> in the folder ticket 
15 acquisition response holds the folder ticket. 

The document management server 10 creates 
contents of the folder ticket and the folder ticket ID 
in response to the folder ticket acquisition request, 
and sends the folder ticket acquisition response, which 
20 includes the folder ticket ID to represent the folder 
ticket, to the client A. 

The document management server 10, in 
response to the folder ticket acquisition request from 
the client, can transmit the folder ticket that permits 
25 usage of the folder to the client that made the request 



- 40 - 



FIG. 10 is a program showing an example of 
the document storage information request. 

As shown in FIG. 10, in the document storage 
information request, the tag <ticketx/ticket> includes 
5 the folder ticket obtained by the client A from the 
folder ticket acquisition response in FIG. 9, and the 
tag <targetUrlx/targetUrl> includes the URL of the 
document management server 10. 

The client A sends the document storage 
10 information request shown in FIG. 10 to the client B. 
In the document storage information request shown in 
FIG. 10, for example, the client B is a scanner. 

Further, the document storage information 
request shown in FIG. 10 may also include layer 
15 structure information of folders in the document 
management server 10. 

FIG. 11 is a program showing an example of 
the document storage information response. 

Once the client B receives the document 
20 storage information request as shown in FIG. 10 from 
client A, the client B sends the document storage 
information response illustrated in FIG. 11 to the 
client A. 

FIG. 12 is a program showing an example of 
25 the folder-ticket-associated session ticket acquisition 
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request . 

As shown in FIG. 12, in the folder-ticket- 
associated session ticket acquisition request, the tag 
<ticketx/ticket> includes the folder ticket obtained 
5 by the client A, and the tag <timeLimitx/timeLimit> 
includes the effective duration of the folder-ticket- 
associated session ticket. 

The client B sends the folder-ticket- 
associated session ticket acquisition request to the 
10 document management server 10. 

FIG. 13 is a program showing an example of 
the folder-ticket-associated session ticket acquisition 
response. 

As shown in FIG. 13 , in the f older-ticket- 
15 associated session ticket acquisition response , the tag 
<returnValue></returnValue> includes the folder-ticket- 
associated session ticket. 

The document management server 10 creates 
contents of the folder-ticket-associated session ticket 
20 and the -ticket-associated session ticket ID in 

response to the folder-ticket-associated session ticket 
acquisition request, and sends the folder-ticket- 
associated session ticket acquisition response, which 
includes the folder-ticket-associated session ticket ID 
25 to represent the folder-ticket-associated session 
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ticket, to the client B. 

FIG. 14 is a program showing an example of 
the folder-ticket-associated folder ID acquisition 
request . 

5 As shown in FIG. 14, in the folder-ticket- 

associated folder ID acquisition request, the tag 
<sessionidx/sessionid> includes the folder-ticket- 
associated folder ID , and the tag <ticketx/ticket> 
includes the folder ticket obtained by the client A. 

10 The client B sends the folder-ticket- 

associated folder ID acquisition request as shown in 
FIG. 14 to the document management server 10. 

FIG. 15 is a program showing an example of 
the folder-ticket-associated folder ID acquisition 

15 response. 

As shown in FIG. 15, in the folder-ticket- 
associated folder ID acquisition response, the tag 
<returnValue></returnValue> includes the folder ID. 

The document management server 10 obtains 

20 the folder ID from the folder ticket as shown in FIG. 4 
in response to the folder-ticket-associated folder ID 
acquisition request, and sends the folder-ticket- 
associated folder ID acquisition response, which 
includes the folder ID , to the client B . 

25 FIG. 16 is a program showing an example of 
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the document storage request. 

As shown in FIG. 16, in the document storage 
j request, the tag <sessionidx/sessionid> includes the 

j folder-ticket-associated session ticket obtained in FIG. 

5 13, the tag <title></title> includes the title of the 
document stored in the folder of the document 

i 

management server 10, the tag <contentx/content> 
includes the content of the document stored in the 
folder of the document management server 10, and the 
10 tag <creator></creator> includes the name of the user 
who cerates the document. 

The client B sends the document storage 
request as shown in FIG. 16 to the document management 
server 10. 

15 Further, the document storage request as 

shown in FIG. 16 may also include layer structure 
information of folders in the document management 
server 10, and thereby, for example, the document 
management server 10 can create a sub-folder below the 

20 specified folder, and store the document therein. 

FIG. 17 is a program showing an example of 
the document storage response. 

As shown in FIG. 17, in the document storage 
response, the tag <returnValue></returnValue> includes 

25 the document ID for identifying the stored document. 
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After storing the specified document to the 
specified folder, the document management server 10 
sends the document storage response, which includes the 
document ID for identifying the stored document, to the 
5 client B in response to the document storage request as 
shown in FIG. 16. 

FIG. 18 is a program showing an example of 
the document list acquisition request. 

As shown in FIG. 18, in the document list 
10 acquisition request, the tag <sessionidx/sessionid> 
includes the folder-ticket-associated session ticket 
obtained by the client B as shown in FIG. 13. 

The client A may obtain the folder-ticket- 
associated session ticket from the document management 
15 server 10 in the same manner as steps S16 and S17 
illustrated in FIG. 2. 

The tag <f olderldx/f olderId> includes the 
folder ID for identifying folders in the document 
management server 10. 
20 The client A sends the document list 

acquisition request as shown in FIG. 18 to the document 
management server 10. 

FIG. 19 is a program showing an example of 
the document list acquisition response. 
25 As shown in FIG. 19, in the document list 
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acquisition response, the tag <identif ierx/icientif ier> 
includes a document ID for identifying a document, the 
tag <title></title> includes a title of the document, 
and the tag <creator></creator> includes the name of 
5 the user who cerates the document. 

In response to the document list acquisition 
request as shown in FIG. 18, the document management 
server 10 sends the document list acquisition response, 
which includes a list of the documents stored in the 
10 specified folder, to the client A. 

The document management server 10 may also 
send the document list to a client in response to a 
request from the client. 

FIG. 20 is a program showing an example of 
15 the document content acquisition request. 

As shown in FIG. 20, in the document content 
acquisition request, the tag <sessionidx/sessionid> 
includes the folder-ticket-associated session ticket 
obtained by the client B as shown in FIG. 13. 
20 As described with reference to FIG. 18, the 

client A may obtain the folder-ticket-associated 
session ticket from the document management server 10 
in the same manner as steps S16 and S17 illustrated in 
FIG. 2. 

25 The tag <docIdx/docId> includes the 
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document ID for identifying a document. 

The client A sends the document content 
acquisition request as shown in FIG. 20 to the document 
management server 10. 
5 FIG. 21 is a program showing an example of 

the document content acquisition response. 

As shown in FIG. 21, in the document content 
acquisition response, the tag 

<returnValuex/returnValue> includes the contents of 
10 the document. 

In response to the document content 

acquisition request as shown in FIG. 2 0 , the document 

management server 10 sends the document content 

acquisition response, which includes the contents of 
15 the specified document stored in the specified folder, 

to the client A. 

The document management server 10 may also 

send the contents of the document to a client in 

response to a request from the client. 
20 Below, the operation of document storage in 

the document management server 10 is described with 

reference to FIG. 22. 

FIG. 22 is a flowchart showing an example of 

the operation of document storage in the document 
25 management server 10. 
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In step S30, the document management server 
10 receives the document storage request as shown in 
FIG. 16 from a client. 

Next, in step S31, the document management 
5 server 10 determines whether the session ticket 

included in the document storage request received in 
step S30 is a valid one. 

If the document management server 10 
determines that the session ticket is a valid one, the 
10 routine proceeds to step S32 , otherwise, the routine is 
terminated. 

For example, the document management server 
10 determines the validity of the session ticket by 
comparing the session ticket held in the document 
15 management server 10 and the session ticket included in 
the document storage request received in step S30. 

In step S32, the document management server 
10 determines whether the session ticket included in 
the document storage request received in step S30 is a 
20 folder-ticket-associated session ticket, that is, 

whether the session ticket is included in the document 
storage request together with a folder ticket. 

If the document management server 10 
determines that the session ticket is a folder-ticket- 
25 associated session ticket, the routine proceeds to step 
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533, otherwise, the routine proceeds to step S34. 

For example, by referring to the content of 
the session ticket as shown in FIG. 5, the document 
management server 10 confirms whether a folder ticket 
5 ID is included in the document storage request received 
in step S30, and thereby determining whether the 
session ticket included in the document storage request 
received in step S30 is a folder-ticket-associated 
session ticket. 

10 In step S33, the document management server 

10 determines whether the folder corresponding to the 
folder ID included in the document storage request 
received in step S30 is a folder to which document 
storage by using the folder ticket is permitted. 

15 If the document management server 10 

determines that the specified folder is a document- 
storage-permitted folder, the routine proceeds to step 

534, otherwise, the routine stops. 

For example, the document management server 
20 10 compares the folder ID included in the received 
document storage request with the folder ticket as 
shown in FIG. 4, which corresponds to the folder ticket 
. ID included in the session ticket shown in FIG. 5, and 
determines whether the folder corresponding to the 
25 folder ID included in the received document storage 
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10 



request is a document- storage-permitted folder. 

In step S3 4, the document management server 
10 stores the document specified by the received 
document storage request in the specified folder. 

In step S35, the document management server 
10 sends the document storage response, which includes 
the document ID for identifying the stored document, as 
shown in FIG. 17, to the client that made the document 
storage request. 



<Time Limit> 

Below, a folder ticket with a time limit is 
explained with reference to FIG. 23 through FIG. 25. 

FIG. 23 is a program showing a second 
15 example of the folder ticket acquisition request. 

In the folder ticket acquisition request 
shown in FIG. 23, comparing with that in FIG. 8, there 
is an additional tag <timeLimitx/timeLimit> , and the 
time limit of the folder ticket is given by the tag 
2 0 <timeLimitx/timeLimit> . 

FIG. 24 is a table showing a second example 
of the folder ticket. 

In the folder ticket shown in FIG. 24, 
comparing with that in FIG. 4, there is also an item of 
25 time limit. By incorporating the time limit into the 
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folder ticket, it is possible to set the time limit of 
the folder ticket, and this improves security of the 
document management method and the document management 
server 10. 

5 FIG. 25 is a flowchart showing an example of 

the operation of time limit confirmation at the 
beginning of the folder-ticket-associated session. 

In step S40, the document management server 
10 receives the folder-ticket-associated session ticket 

i 

i 

10 acquisition request, as shown in FIG. 12, from a client. 

Next, in step S41, the document management 
server 10 determines whether the folder ticket included 
in the folder-ticket-associated session ticket 
acquisition request received in step S40 is within the 

15 time limit . 

If the document management server 10 
determines that the folder ticket is within the time 
limit, the routine proceeds to step S42, and if the 
folder ticket is not within the time limit, the routine 

20 is terminated. 

For example, by referring to the content of 
the folder ticket as shown in FIG. 24, the document 
management server 10 finds the time limit in the folder 
ticket included in the folder-ticket-associated session 

25 ticket acquisition request received in step S40, and 
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determines whether the folder ticket received in step 
S40 is within the time limit. 

In step S42, the document management server 
10 creates the content of the session ticket and 
5 identification information as shown in FIG. 5, and 
holds the session ticket. 

Next, in step S43, by using the session 
ticket ID created in step S42 as the session ticket, 
the document management server 10 sends the folder- 

10 ticket-associated session ticket acquisition response 
including the session ticket, as shown in FIG. 13, to 
the client that made the folder-ticket-associated 
session ticket acquisition request. 

When the document management server 10 

15 receives the folder-ticket-associated session ticket 
acquisition request, py confirming the time limit of 
the folder ticket, it is possible to forbid usage of 
the expired folders, and this improves security of the 
document management method and the document management 

20 server 10. 

Alternatively, as shown in FIG. 25, When the 
document management server 10 receives the folder- 
ticket-associated session ticket acquisition request, 
the document management server 10 may constantly 
25 monitor the folders and check the presence of expired 
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folders instead of checking the time limit directly, 
and thereby forbidding usage of the expired folders. 

With the above configuration, it is not 
necessary to manage the folders out of the time limit. 

5 

Connection Limit> 

Below, a folder ticket with a limit number 

of connections is explained with reference to FIG. 2 6 

through FIG. 28. 
10 FIG. 2 6 is a program showing a third example 

of the folder ticket acquisition request. 

In the folder ticket acquisition request 

shown in FIG. 26, comparing with that in FIG. 8, there 

is an additional tag <entryCountx/entryCount> , which 
15 specifies the limit number of connections between a 

client and the document management server 10 by using 

the folder ticket. 

FIG. 27 is a table showing a third example 

of the folder ticket. 
20 In the folder ticket shown in FIG. 27, 

comparing with that in FIG. 4, there is an item of 

connection limit indicating the limit number of 

connections between a client and the document 

management server 10. By incorporating the item of 
25 limit number of connections into the folder ticket, it 
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is possible to limit the number of connections, and 
this improves security of the document management 
method and the document management server 10. 

FIG. 28 is a flowchart showing an example of 
5 the operation of confirmation of the limit number of 
connections at the beginning of the folder-ticket- 
associated session. 

In step S50, the document management server 
10 receives the folder-ticket-associated session ticket 
10 acquisition request as shown in FIG. 12 from a client. 

Next, in step S51, the document management 
server 10 determines whether the limit number of 
connections between the client and the document 
management server 10 by using the folder ticket, which 
15 is included in the folder-ticket-associated session 
ticket acquisition request received in step S50, is 
equal to or greater than one. 

If the document management server 10 
determines that the limit number of connections is 
20 equal to or greater than one, the routine proceeds to 
step S52 , otherwise, the routine is terminated. 

For example, by referring to the contents of 
the folder ticket shown in FIG. 27, the document 
management server 10 finds the limit number of 
25 connections included in the folder-ticket-associated 
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session ticket acquisition request received in step S50, 
and determines whether the limit number of connections 
received in step S50 is equal to or greater than one. 

In step S52, the document management server 
5 10 decreases the limit number of connections by one, 
which is included in the folder-ticket-associated 
session ticket acquisition request received in step S50. 

Next, in step S53, the document management 
server 10 creates the content of the session ticket and 

10 identification information as shown in FIG. 5, and 
holds the session ticket. 

Next, in step S54, by using the session 
ticket ID created in step S53 as the session ticket, 
the document management server 10 sends the f older- 

15 ticket-associated session ticket acquisition response 
including the session ticket, as shown in FIG. 13, to 
the client that made the folder-ticket-associated 
session ticket acquisition request. 

When the document management server 10 

20 receives the folder-ticket-associated session ticket 

acquisition request, by confirming the limit number of 
connections between a client and the document 
management server 10 by using the folder ticket, it is 
possible to forbid usage of the folders that have been 

25 connected for a number of times over the limit number, 
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and this improves security of the document management 
method and the document management server 10. 

<Document Storage Limit> 
5 Below, a folder ticket with a limit number 

of operations of document storage is explained with 
reference to FIG. 29 through FIG. 32. 

FIG. 2 9 is a program showing a fourth 
example of the folder ticket acquisition request. 

10 In the folder ticket acquisition request 

shown in FIG. 29, comparing with that in FIG. 8, there 
is an additional tag <putDocCountx/putDocCount> , which 
specifies the limit number of operations of document 
storage in a folder in the document management server 

15 10. 

FIG. 30 is a table showing a fourth example 
of the folder ticket. 

In the folder ticket shown in FIG. 30, 
comparing with that in FIG. 4, there is an item of 

20 storage operation limit indicating the limit number of 
operations of document storage in a folder in the 
document management server 10. By incorporating the 
item of the number of document storage operations into 
the folder ticket, it is possible to limit the number 

25 of operations of document storage in a folder in the 
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document management server 10, and this improves 
security of the document management method and the 
document management server 10. 

FIG. 31 is a table showing a second example 
5 of the folder-ticket-associated session ticket. 

The folder-ticket-associated session ticket 
shown in FIG. 31, which is the same as that in FIG. 5, 
includes a session ticket ID and a folder ticket ID , 
but the folder ticket corresponding to the folder 
10 ticket ID in FIG. 31, as that shown in FIG. 30, 

includes the limit number of operations of document 
storage in a folder in the document management server 
10. . 

FIG. 32 is a flowchart showing an example of 
15 the operation of confirmation of the limit number of 

the document storage operations when storing a document 
in a folder in the document management server 10. 

In step S60, the document management server 
10 receives the document storage request as shown in 
20 FIG. 16 from a client. 

Next, in step S61, the document management 
server 10 determines whether the session ticket 
included in the document storage request received in 
step S60 is a valid one. 
25 If the document management server 10 
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determines that the session ticket is a valid one , the 
routine proceeds to step S62, otherwise, the routine is 
terminated. 

For example, the document management server 
5 10 determines the validity of the session ticket by 
comparing the session ticket held in the document 
management server 10 and the session ticket included in 
the document storage request received in step S60. 

In step S62, the document management server 

10 10 determines whether the session ticket included in 

the document storage request received in step S60 is a 
.folder-ticket-associated session ticket, that is, 
whether the session ticket is included in the document 
storage request together with a folder ticket. 

15 If the document management server 10 

determines that the session ticket is a folder-ticket- 
associated session ticket, the routine proceeds to step 
S63, otherwise, the routine proceeds to step S66. 

For example, by referring to the content of 

20 the session ticket as shown in FIG. 31, the document 
management server 10 confirms whether a folder ticket 
ID is included in the document storage request received 
in step S60, and determines whether the session ticket 
included in the document storage request received in 

25 step S60 is a folder-ticket-associated session ticket. 
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In step S63, the document management server 
10 determines whether the folder corresponding to the 
folder ID included in the document storage request 
received in step S60 is a folder to which document 
5 storage by using the folder ticket is permitted. 

If the document management server 10 
determines that the specified folder is a document- 
storage-permitted folder, the routine proceeds to step 
S64, otherwise, the routine stops. 

10 For example, the document management server 

10 compares the folder ID included in the received 
document storage request with the folder ticket as 
shown in FIG. 30 , which corresponds to the folder 
ticket ID included in the session ticket shown in FIG. 

15 31 , and determines whether the folder corresponding to 
the folder ID included in the received document storage 
request is a document-storage-permitted folder. 

In step S64, the document management server 
10 determines whether the limit number of the document 

20 storage operations included in the folder ticket as 
shown in FIG. 30 is equal to or greater than one. 

If the document management server 10 
determines that the limit number of the document 
storage operations is equal to or greater than one, the 

25 routine proceeds to step S65, otherwise, the routine is 
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terminated. 

For example, by referring to the contents of 
the session ticket shown in FIG. 31, the document 
management server 10 finds the folder ticket ID 
5 received in step S60 , then by referring to the contents 
of the folder ticket shown in FIG. 30, the document 
management server 10 finds the limit number of the 
document storage operations received in step S60 and 
determines whether the received limit number of 
10 document storage operations is equal to or greater than 
one . 

In step S65, the document management server 
10 decreases the limit number of the document storage 
operations included in the folder ticket as shown in 
15 FIG. 30 by one. 

In step S66, the document management server 
10 stores the document specified by the received 
document storage request in the specified folder. 

In step S67, the document management server 
20 10 sends the document storage response including the 
document ID for identifying the stored document, as 
shown in FIG. 17, to the client that made the document 
storage request. 

When the document management server 10 
25 receives the document storage request, by confirming 
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the limit number of operations of document storage in a 
folder of the document management server 10, it is 
possible to forbid usage of folders whose assigned 
number of document storage operations has been used up, 
5 and this improves security of the document management 
method and the document management server 10. 

It should be noted that although FIG. 32 
illustrates the operation of confirming the limit 
number of the document storage operations when storing 

10 a document in a folder , when the folder ticket permits 
rewriting or deleting documents stored in the folder, 
and when a request of rewriting or deleting documents 
is received from a client, the document management 
server 10 operates in the same way as shown in FIG. 32 , 

15 except that the step S65 is not needed. 

<Storage Capacity Limit> 

Below, a folder ticket with a limit of the 
storage capacity is explained with reference to FIG. 33 
20 through FIG. 36. 

FIG. 33 is a program showing a fifth example 
of the folder ticket acquisition request. 

In the folder ticket acquisition request 
shown in FIG. 33 , comparing with that in FIG. 8, there 
25 is an additional tag <putDocCapacity></putDocCapacity> , 
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which specifies the limit storage capacity of a folder 
of the document management server 10. 

FIG. 34 is a table showing a fifth example 
of the folder ticket. 
5 In the folder ticket shown in FIG. 34, 

comparing with that in FIG. 4, there is an item of 
storage capacity limit of a folder of the document 
management server 10 in units of MB (Megabyte) . By 
incorporating the item of the storage capacity limit 

10 into the folder ticket, it is possible to limit the 
amount of the documents stored in a folder in the 
document management server 10, and this improves 
security of the document management method and the 
document management server 10. 

15 FIG. 35 is a table showing a third example 

of the folder-ticket-associated session ticket. 

The folder-ticket-associated session ticket 
shown in FIG. 35, which is the same as that in FIG. 5, 
includes a session ticket ID and a folder ticket ID, 

20 but the folder ticket corresponding to the folder 
ticket ID in FIG. 35, as that shown in FIG. 34, 
includes the storage capacity limit of a folder in the 
document management server 10. 

FIG. 36 is a flowchart showing an example of 

25 the operation of confirmation of the storage capacity 
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limit when storing a document in a folder in the 
document management server 10. 

In step S70, the document management server 
10 receives the document storage request as shown in 
5 FIG. 16 from a client. 

Next, in step S71, the document management 
server 10 determines whether the session ticket 
included in the document storage request received in 
step S70 is a valid one. 
10 If the document management server 10 

determines that the session ticket is a valid one, the 
routine proceeds to step S72, otherwise, the routine is 
terminated . 

For example, the document management server 
15 10 determines the validity of the session ticket by 
comparing the session ticket held in the document 
management server 10 and the session ticket included in 
the document storage request received in step S70. 

In step S72, the document management server 
20 10 determines whether the session ticket included in 

the document storage request received in step S70 is a 
folder-ticket-associated session ticket, that is, 
whether the session ticket is included in the document 
storage request together with a folder ticket. 
2 5 If the document management server 10 
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determines that the session ticket is a folder-ticket- 
associated session ticket, the routine proceeds to step 

573, otherwise, the routine proceeds to step S76. 

For example, by referring to the content of 
5 the session ticket as shown in FIG. 35, the document 
management server 10 confirms whether a folder ticket 
ID is included in the document storage request received 
in step S70, and determines whether the session ticket 
included in the document storage request received in 
10 step S70 is a folder-ticket-associated session ticket. 

In step S73, the document management server 
10 determines whether the folder corresponding to the 
folder ID included in the document storage request 
received in step S70 is a folder to which document 
15 storage by using the folder ticket is permitted. 

If the document management server 10 
determines that the specified folder is a document- 
storage-permitted folder, the routine proceeds to step 

574, otherwise, the routine stops. 

2 0 For example, the document management server 

10 compares the folder ID included in the received 
document storage request with the folder ticket as 
shown in FIG. 34, which corresponds to the folder 
ticket ID included in the session ticket shown in FIG. 

25 35, and determines whether the folder corresponding to 
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the folder ID included in the received document storage 
request is a document-storage-permitted folder. 

In step S74, the document management server 
10 determines whether the difference between the 
5 storage capacity limit included in the folder ticket as 
shown in FIG. 34 and the requested storage capacity 
included in the document storage request received in 
step S70 is greater than zero. 

If the document management server 10 
10 determines that the difference is greater than zero, 
the routine proceeds to step S75, otherwise, the 
routine is terminated. 

In step S75, the document management server 
10 subtracts the requested storage capacity included in 
15 the document .storage request received in step S70 from 
the storage capacity limit included in the folder 
ticket as shown in FIG. 34. 

In step S76, the document management server 
10 stores the document specified by the received 
20 document storage request in the folder specified by the 
document storage request. 

In step S77, the document management server 
10 sends the document storage response including the 
document ID for identifying the stored document, as 
2 5 shown in FIG. 17, to the client that made the document 
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storage request. 

When the document management server 10 
receives the document storage request, by confirming 
the document storage capacity limit of a folder in the 
5 document management server 10 , it is possible to forbid 
usage of folders whose assigned storage capacity has 
been used up, and this improves security of the 
document management method and the document management 
server 10. 

10 

<Multiple Folders > 

Below, a folder ticket with folder IDs of a 
number of folders is explained with reference to FIG. 
37 and FIG. 38 . 

15 FIG. 37 is a program showing a sixth example 

of the folder ticket acquisition request. 

In FIG. 37, the argument of the variable 

"getFolderTicket" in the folder ticket acquisition 

request is an array of character strings, while in FIG. 
20 8, the argument of the variable "getFolderTicket " in 

the folder ticket acquisition request is a single 

character string. 

In FIG. 37, in the tag <folderIdx/f older Id> , 

there are a series of tags <item></item> , and each of 
2 5 the tags <item></item> includes a folder ID for 
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identifying one of the folders operable by referring to 
the folder ticket. 

FIG. 38 is a table showing a sixth example 
of the folder ticket. 
5 In the folder ticket shown in FIG. 38 , 

comparing with that in FIG. 4, there are more than one 
folder ID for identifying more than one folder operable 
by referring to the folder ticket. 
I By incorporating more than one folder IDs 

10 for identifying more than one folder that are operable 

i 

i by referring to the folder ticket , the document 

management server 10 can use more than one folder with 
only one folder ticket. 

15 <Sub-folder Usage Permission> 

In the above, it is described that the 
document management server 10 creates a folder ticket 
and permits storage of documents in a usage-permitted 
folder or permit edition of documents stored in the 

2 0 folder. 

Below, with reference to FIG. 39 and FIG. 40, 
an explanation is made of a case in which the document 
management server 10 permits usage of sub-folders of a 
usage-permitted folder . 
2 5 FIG. 39 is a schematic view showing an 
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example of a layer structure of a folder. 

As shown in FIG. 39, a root folder A has a 
sub-folder B, a sub-folder C, and a sub-folder D, which 
are one-layer lower than the root folder A. 
5 The folder B has a sub-folder E and a sub- 

folder F, which are one-layer lower than the folder B. 

The folder C has a sub-folder G which is 
one-layer lower than the folder C. Further, the folder 
G has a sub-folder H which is one-layer lower than the 
10 folder G. 

As described below, if the document 
management server 10 creates a folder ticket and 
permits a client to use the folder B, as long as the 
folder ticket is valid, not only the folder B, but also 

15 its sub-folders, that is, the folder E and folder F, 
can be used. 

FIG. 40 is a flowchart showing a second 
example of the operation of document storage in the 
document management server 10. 

20 In step S80, the document management server 

10 receives the document storage request as shown in 
FIG. 16 from a client. 

Next, in step S81, the document management 
server 10 determines whether the session ticket 

25 included in the document storage request received in 
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step S80 is a valid one. 

If the document management server 10 
determines that the session ticket is a valid one, the 
routine proceeds to step S82, otherwise, the routine is 
5 terminated. 

For example, the document management server 
10 determines the validity of the session ticket by 
comparing the session ticket held in the document 
management server 10 and the session ticket included in 
10 the document storage request received in step S80. 

In step S82, the document management server 
10 determines whether the session ticket included in 
the document storage request received in step S80 is a 
folder-ticket-associated session ticket, that is, 
15 whether the session ticket is included in the document 
storage request together with a folder ticket. 

If the document management server 10 
determines that the session ticket is a folder-ticket- 
associated session ticket, the routine proceeds to step 
20 S83, otherwise, the routine proceeds to step S86. 

For example, by referring to the content of 
the session ticket as shown in FIG. 5, the document 
management server 10 confirms whether a folder ticket 
ID is included in the document storage request received 
25 in step S80, and thereby determining whether the 
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session ticket included in the document storage request 
received in step S80 is a folder-ticket-associated 
session ticket. 

In step S83, the document management server 
5 10 determines whether the folder corresponding to the 
folder ID included in the document storage request 
received in step S80 is a folder to which document 
storage by using the folder ticket is permitted. 

If the document management server 10 
10 determines that the specified folder is a document- 
storage-permitted folder , the routine proceeds to step 
S86, otherwise, to step S84. 

For example, the document management server 
10 compares the folder ID included in the received 
15 document storage request with the folder ticket as 

shown in FIG. 4, which corresponds to the folder ticket 
ID included in the session ticket shown in FIG. 5, and 
determines whether the folder corresponding to the 
folder ID included in the received document storage 
2 0 request is a document-storage-permitted folder. 

In step S84, the document management server 
10 determines whether the folder corresponding to the 
specified folder ID is a root folder. 

If the document management server 10 
25 determines the specified folder is a root folder, the 
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routine stops, otherwise, the routine proceeds to step 
S85. 

In step S85, the document management server 
10 obtains the ID of the parent folder of the folder 
5 corresponding to the specified folder ID, and proceeds 
to step S83, and repeats. 

In step S86, the document management server 
10 stores the document specified by the received 
document storage request in the specified folder. 

10 In step S87, the document management server 

10 sends the document storage response, which includes 
the document ID for identifying the stored document, as 
shown in FIG. 17, to the client that made the document 
storage request. 

15 By the operations as shown in FIG. 40, while 

being able to create a folder ticket and permit 
document storage in a usage-permitted folder or permit 
edition of documents stored in the folder, it is also 
possible to permit document storage in a sub-folder of 

20 the usage-permitted folder or permit edition of 
documents stored in the sub-folder. 



<Document Ticket> 

It is described above that the document 
25 management server 10 creates the document storage 



- 71 - 



response , as shown in FIG. 17, including a document ID 
for identifying a stored document in response to the 
document storage request, and sends the document 
storage response to the client that made the document 
5 storage request. 

Below, with reference to FIG. 41 and FIG. 42, 
it is described that the document management server 10 
sends a document storage response including a document 
ID and a document ticket that permits usage of a 
10 document to the client that made the document storage 
request. 

FIG. 41 is a flowchart showing a third 
example of the operation of document storage in the 
document management server 10. The operations from step 
15 S90 to step S94 are the same as the operations from 
step S30 to step S34 shown in FIG. 22. 

In step S90, the document management server 
10 receives the document storage request as shown in 
FIG. 16 from a client. 
2 0 Next, in step S91, the document management 

server 10 determines whether the session ticket 
included in the document storage request received in 
step S90 is a valid one. 

If the document management server 10 
25 determines that the session ticket is a valid one, the 
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routine proceeds "to step S92, otherwise, the routine is 
terminated . 

For example, the document management server 
10 determines the validity of the session ticket by 
5 comparing the session ticket held in the document 

management server 10 and the session ticket included in 
the document storage request received in step S90. 

In step S92, the document management server 
10 determines whether the session ticket included in 
10 the document storage request received in step S90 is a 
folder-ticket-associated session ticket, that is, 
whether the session ticket is included in the document 
storage request together with a folder ticket. 

If the document management server 10 
15 determines that the session ticket is a folder-ticket- 
associated session ticket, the routine proceeds to step 
S93, otherwise, the routine proceeds to step S94. 

For example, by referring to the content of 
the session ticket as shown in FIG. 5, the document 
20 management server 10 confirms whether a folder ticket 

ID is included in the document storage request received 
in step S90, and thereby determining whether the 
session ticket included in the document storage request 
received in step S90 is a folder-ticket-associated 
25 session ticket. 
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In step S93, the document management server 
10 determines whether the folder corresponding to the 
folder ID included in the document storage request 
received in step S90 is a folder to which document 
5 storage by using the folder ticket is permitted. 

If the document management server 10 
determines that the specified folder is a document- 
storage-permitted folder, the routine proceeds to step 
S94, otherwise, the routine stops. 

10 For example, the document management server 

10 compares the . folder ID included in the received 
document storage request with the folder ticket as 
shown in FIG. 4, which corresponds to the folder ticket 
ID included in the session ticket shown in FIG. 5, and 

15 determines whether the folder corresponding to the 
folder ID included in the received document storage 
request is a document-storage-permitted folder. 

In step S94, the document management server 
10 stores the document specified by the received 

20 document storage request in the specified folder. 

In step S95 , the document management server 
10 creates a document ticket that permits usage of a 
document stored in a folder, and sends a document 
storage response, as shown in FIG. 42 and described 

25 below, including a document ID for identifying the 
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stored document and the document ticket to the client 
that made the document storage request. 

Because the document management server 10 
sends the document storage response including both the 
5 document ID and the document ticket to the client, the 
client that stores the document by using the document 
ticket is able to obtain the document ticket that 
permits usage of the document, and uses the stored 
document with the document ticket. 
.10 FIG. 42 is a program showing another example 

of the document storage response. 

In the document storage response shown in 
FIG. 42, comparing with that in FIG. 17, there is an 
additional tag <docTicketx/docTicket> , which holds the 
15 document ticket that permits usage of the stored 
document . 



<Edition Privilege> 

Below, with reference to FIG. 43 and FIG. 44, 

20 an explanation is made of a case in which after storing 
documents in a folder, the document management server 
10 grants an additional edition privilege, such as 
rewriting or deleting, to a folder ticket having only 
the privilege of documents storage in the folder. 

25 FIG. 43 is a flowchart showing a fourth 
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example of the operation of document storage in the 
document management server 10. 

In step S100, the document management server 
10 receives the document storage request as shown in 
5 FIG. 16 from a client. 

Next, in step S101, the document management 
server 10 determines whether the session ticket 
included in the document storage request received in 
step S100 is a valid one. 
10 If the document management server 10 

determines that the session ticket is a valid one, the 
routine proceeds to step S102, otherwise, the routine 
is terminated. 

For example, the document management server 
15 10 determines the validity of the session ticket by 
comparing the session ticket held in the document 
management server 10 and the session ticket included in 
the document storage request received in step S100. 

In step S102, the document management server 
20 10 determines whether the folder corresponding to the 
folder ID included in the document storage request 
received in step S100 is specified by the folder ticket 
to be a folder to which document storage is permitted. 
If the document management server 10 
25 determines that the specified folder is a document- 
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storage-permitted folder, the routine proceeds to step 
S103, otherwise, the routine stops. 

For example, the document management server 
10 compares the folder ID included in the received 
5 document storage request with the folder ticket as 

shown in FIG. 4, which corresponds to the folder ticket 
ID included in the session ticket shown in FIG. 5, and 
determines whether the folder corresponding to the 
folder ID included in the received document storage 

10 request is a document-storage-permitted folder by using 
the folder ticket. 

In step S103, the document management server 
10 stores the document specified by the received 
document storage request in the specified folder. 

15 In step S104, the document management server 

10 determines whether the session ticket included in 
the document storage request received in step S130 is a 
folder-ticket-associated session ticket, that is, 
whether the session ticket is included in the document 

20 storage request together with a folder ticket. 

If the document management server 10 
determines that the session ticket is a folder-ticket- 
associated session ticket, the routine proceeds to step 
S105, otherwise, the routine proceeds to step S106. 

25 For example, by referring to the content of 
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the session ticket as shown in FIG. 5, the document 

management server 10 confirms whether a folder ticket 

ID is included in the document storage request received 

in step S100, and thereby determining whether the 
5 session ticket included in the document storage request 

received in step S100 is a folder-ticket-associated 

session ticket. 

In step S105, the document management server 

10 appends the document ID for identifying the 
10 documents stored in a folder to the folder ticket with 

the document ID being an editable text. 

In step S106, the document management server 

10 sends the document storage response, which includes 

the document ID for identifying the stored document, as 
15 shown in FIG. 17, to the client that made the document 

storage request. 

Because the document management server 10 

appends the document ID for identifying documents 

stored in a folder to the folder ticket with the 
20 document ID being an editable text, the client having 

the folder ticket is capable of editing the document 

corresponding to the document ID. 

FIG. 44 is a table showing an example of 

such a folder ticket . 
25 In the folder ticket shown in FIG. 44, 
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comparing with that in FIG. 4, there is a document ID, 
which is an editable text, of a stored document. 

Folders mentioned in this specification 
correspond to UNIX (registered trademark) or MS-DOS 
5 (registered trademark) directories. 

While the present invention is described 
above with reference to specific embodiments chosen for 
purpose of illustration, it should be apparent that the 
invention is not limited to these embodiments, but 
10 numerous modifications could be made thereto by those 
skilled in the art without departing from the basic 
concept and scope of the invention. 

Summarizing the effect of the invention, 
according to the present invention, it is possible to 
15 provide a document management device and a document 
management method that enables usage of a usage- 
permitted folder while ensuring high security without 
imposing an additional load on a network. 

This patent application is based on Japanese 
20 Priority Patent Applications No. 2003-022143 filed on 
January 30, 2003 and No. 2004-011067 filed on January 
19, 2 004, and the entire contents of which are hereby 
incorporated by reference. 
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